California Consumer Privacy Act Notice

Effective Date: 12/30/2022
Last Updated: 9/1/2023

This Notice describes the personal information we collect, use, and disclose about individual California residents, consumers, applicants, and contractors who visit or interact with this website, visit any of our offices, facilities or locations, purchase or inquire about any of our products or services, contract with us to provide services, apply for a position of employment, or otherwise interact or do business with us.

This Notice does not apply to our current and former employees and their family members, dependents, and beneficiaries; if you are a California resident who is a current or former employee of H4C or a family member, dependent, or beneficiary of any of our current or former employees, you may request access to our Employee Privacy Policy by sending an email to [email protected].

  1. Collection, Use, and Sharing of Personal Information
    Whenever you visit our website, we will collect some information from you automatically simply by you visiting and navigating through this site, and some voluntarily when you submit information using a form on the website, utilize the Chat feature on our website, enroll in or subscribe to our newsletter or marketing communications, request information, or use any of the other interactive portions of our website. Through this website, we will collect information that can identify you and/or your activity.Additionally, whenever you communicate, interact or do business with us, whether online or at any of our physical locations or facilities, or whether you are contracted to perform services for us or apply for a position of employment, we will be collecting personal information from you or about you in the course of our interaction or dealings with you.Based on your specific transactions and interactions with us or our website, we will or may collect, and we have in the last 12 months collected, the following categories of personal information about you. For each category of information, the categories of third parties and service providers to whom we have disclosed the information in the last 12 months are referenced by a letter that coincides with the letter in the list of categories of service providers and third parties that follows soon after this table.
Click or tap on table to scroll.
Category Examples Disclosed in Last Twelve Months To Retention Period
Personal Identifiers Name, alias, social security number, date of birth, driver’s license
or state identification card number, passport number.
A, B, D, E, F, G, H, I, J, K, L, M, N Duration of our relationship with you plus 4 years.If you are a job applicant and are hired by the Company H4C, then your name will be retained permanently, and the rest will be retained for the duration of employment plus 6 years. If you are not hired, this data will be retained for 4 years from when the position is filled or the date we receive your information, whichever is longer.
Contact Information Home, postal or mailing address, email address, home phone number,
cell phone number.
A, B, D, E, F, G, H, I, J, K, L, M, N Duration of our relationship with you plus 4 years.If you are a job applicant and are hired by H4C the Company, this will be retained permanently. If you are not hired, this data will be retained for 4 years from when the position is filled or the date we receive your information, whichever is longer.
Account Information Username and password for Company H4C accounts and systems (including where a job applicant or candidate must create an account to apply for a job), and any required security or access code, password, security questions, or credentials allowing access to your Company H4C accounts. L Username: permanent;
Password or security code: while in use + 2 years
Protected Classifications Race, ethnicity, national origin, sex, gender, sexual orientation, gender identity, religious or philosophical beliefs, age, disability, medical or mental condition, military status, familial status, union membership. A, D, K Duration of our relationship with you plus 4 years.This data is not collected from or about job applicants (unless required by law or government contract).
Commercial Transactional Data Information regarding products or services provided, purchasing
history.
A, B, C, E, F, G, H, N, M 4 years after transaction, unless necessary to maintain for a longer period for product warranty, or OSHA / FDA or other regulatory compliance.
Biometric Data Fingerprints, retina scans, facial recognition, handprints. Not Disclosed other than to the vendor we engaged to process this
data.
While in use for identity verification, plus 1 year. Not collected from job applicants.
Internet Network and Computer Activity Date and time of your visit to this website; web pages visited; links clicked on the website; browser ID; browser type; device ID; operating system; form information downloaded; domain name from which our site was accessed; search history; and cookies; internet or other electronic network activity information related to usage of Company H4C networks, servers, intranet, or shared drives, as well as Company H4C-owned computers and electronic devices, including system and file access logs, security clearance level, browsing history, search history, and usage history. F, H, L 3 years.
Geolocation Data IP address and/or GPS location, latitude & longitude. L 3 years.
Mobile Device Data Information collected when you navigate, access or use any of our websites via mobile device, including device type, software type; data identifying your device if you access our business networks and systems, including cell phone make, model, and serial number, cell phone number, and cell phone provider. B, E, F, H 3 years
Online Portal and Mobile App Access and Usage Information Username and password, account history, usage history, file access
logs, security clearance level, and any information submitted through the account.
L 3 years
Visual, Audio or Video Recordings Your image when recorded or captured in surveillance camera footage or
pictures of you taken on our premises or at our events or that you share with us; audio recordings of calls and virtual meetings as disclosed to you at the time of the call.
L Surveillance video – 90 days; the rest of this category is retained for the duration of our relationship with you plus 4 years.
Pre-Hire Information Information gathered on job applicants as part of background screening
and reference checks, pre-hire drug test results, information recorded in job interview notes by persons conducting job interviews for H4C the Company, information contained in candidate evaluation records and assessments, information in work product samples you provided, and voluntary disclosures by you.
I, J, K If hired, this data will be retained for the duration of employment plus 6 years. If not hired, it will be retained for 4 years from when the position is filled or the date we receive your information, whichever is longer.
Employment and Education History Information contained in job applicants’ resumes regarding educational
history, information in transcripts or records of degrees, vocational certifications obtained, and information regarding prior job experience, positions held, and when permitted by applicable law your salary history or expectations.
I, J, K If hired, this data will be retained for the duration of employment plus 6 years. If not hired, it will be retained for 4 years from when the position is filled or the date we receive your information, whichever is longer.
Professional Related Information Information on independent contractors contained in tax forms/1099 forms, safety records, licensing and certification records, and performance records, and information related to services provided by independent contractors, including in statements of work. A, I, J, K Duration of our relationship with you plus 4 years.
Facility & Systems Access Information Information identifying you, if you accessed our secure company facilities, systems, networks, computers, and equipment, and at what times, using keys, badges, fobs, login credentials, or other security access method. L 3 years
Medical and Health Information Information related to symptoms, exposure, contact tracing, diagnosis,
testing, or vaccination for infectious diseases (e.g., COVID-19), pandemics, or other public health emergencies.
Not Disclosed 2 years.Job Applicants:
If hired, this data will be retained for the duration of employment plus 6 years. If not hired, it will be retained for 4 years from when the position is filled or the date we receive your information, whichever is longer.
Inferences Based on analysis of your activity on the website, we may develop inferences regarding user behavior.For job applicants, based on analysis of the personal information collected, we may develop inferences regarding job applicants’ predispositions, behavior, attitudes, intelligence, abilities, and aptitudes for
purposes of recruiting and hiring assessments and decisions.
B, E, F, H Duration of our relationship with you plus 4 years. Job Applicants: If hired, this data will be retained for the duration of employment plus 6 years. If not hired, it will be retained for 4 years from when the position is filled or the date we receive your information, whichever
is longer.

Of the above categories of Personal Information, the following are categories of Sensitive Personal Information we may collect from or about consumers, independent contractors, or applicants:

  1. Personal Identifiers (social security number, driver’s license or state identification card number, passport number)
  2. Account Information (your H4C account log-in, in combination with any required security or access code, password, or credentials allowing access to the account)
  3. Protected Classifications (racial or ethnic origin, religious or philosophical beliefs, union membership, or sexual orientation)
  4. Biometric Information (used to uniquely identify you)
  5. Geolocation Data (IP address and/or GPS location, latitude & longitude)
  6. Medical and Health Information

Personal information does not include:

  • Publicly available information from government records.
  • Information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer, independent contractor, or applicant, or from widely distributed media.
  • Information made available by a person to whom the consumer, independent contractor, or applicant has disclosed the information if the consumer, independent contractor, or applicant has not restricted the information to a specific audience.
  • Deidentified or aggregated information.

We may collect your personal information from the following sources:

  • You, the consumer, independent contractor, or job applicant, when you visit the website and voluntarily submit information through forms on the website or social media, when you visit any of our stores or physical locations, when you purchase or inquire about any of our products or services, when you utilize the Live Chat feature on the website, when you enter into a contract to perform services for us, or when you apply for a position of employment
  • Our employees, contractors, vendors, suppliers, guests, visitors, other consumers, and customers based on your interactions with them (if any)
  • We utilize cookies to automatically collect information about our website visitors
  • Surveillance cameras at our physical locations
  • Lead generators and referral sources
  • Credit and consumer reporting agencies
  • HR support vendors
  • Recruiters
  • Staffing agencies
  • Social media platforms
  • H4C-issued computers, electronic devices, and vehicles
  • H4C systems, networks, software applications, and databases you log into or use
  • H4C systems, networks, software applications, and databases you log into or use in the course of applying for a position with H4C, interacting with our website, or otherwise interacting with us in any other capacity, including from vendors H4C engages to manage or host such systems, networks, applications or databases
  • Personal references and former employers (if you are a job applicant)
  • Schools, universities, or other educational institutions which you attended (if you are a job applicant)

We may disclose, sell, or share your personal information to/with the following categories of service providers, contractors, or third parties:

  1. Financial institutions
  2. Lead providers
  3. Product manufacturers/administrators
  4. Government agencies
  5. Promotional or other fulfillment vendors
  6. Marketing support vendors and vendors that support managing or hosting the website and the Chat function on the website
  7. Transaction support vendors (e.g., check guaranty, payment processors)
  8. Data analytics vendors
  9. Professional employer organizations, recruiting firms, and/or staffing agencies
  10. Consumer reporting agencies or credit reporting agencies
  11. Talent acquisition management systems, and other vendors providing services for purposes of our human resources information system (HRIS) and management of job applicant data and recruiting process
  12. Security and risk management vendors, including IT, cybersecurity, and privacy vendors and consultants
  13. Corporate customers (meaning an entity, as opposed to a natural person, that purchases, leases, or finances any of our products or services)
  14. Original equipment manufacturers (OEM) (suppliers and makers of the products/vehicles we sell or lease to our customers)

We may collect your personal information for the following business purposes:

  1. To fulfill or meet the purpose for which you provided the information.
  2. To process, complete, and maintain records on transactions.
  3. To retain your selection for Text opt-in/opt-out ensure customers who opted out are not sent any text messages.
  4. To schedule, manage, and keep track of customer appointments.
  5. To maintain records of when customers decline a service or sale.
  6. To respond to consumer inquiries, including requests for information, customer support online, Live Chat on the website, phone calls, etc.
  7. To provide interest-based and targeted advertising.
  8. To contact you by email, telephone calls, mail, SMS, or other equivalent forms of communication regarding updates or informative communications related to the functionalities, services, or other information you requested or asked us to provide to you.
  9. To improve user experience on our website.
  10. To understand the demographics of our website visitors.
  11. To detect security incidents.
  12. To debug, identify, and repair errors that impair the existing intended functionality of our website.
  13. To protect against malicious or illegal activity and prosecute those responsible.
  14. To verify and respond to consumer requests.
  15. To prevent identity theft.
  16. JOB APPLICANT PURPOSES:
    1. To fulfill or meet the purpose for which you provided the information. For example, if you share your name and contact information to apply for a job with H4C, we will use that Personal Information in connection with your candidacy for employment.
    2. To comply with local, state, and federal laws and regulations requiring employers to maintain certain records, as well as local, state, and federal laws, regulations, ordinances, guidelines, and orders relating to infectious diseases, pandemics, outbreaks, and public health emergencies, including applicable reporting requirements.
    3. To evaluate your job application and candidacy for employment.
    4. To obtain and verify background checks and references.
    5. To communicate with you regarding your candidacy for employment.
    6. To permit you to create a job applicant profile, which you can use for filling out future applications if you do not get the job you are applying for.
    7. To keep your application on file even if you did not get the job you applied for, in case there is another position for which we want to consider you as a candidate even if you do not formally apply.
    8. To evaluate and improve our recruiting methods and strategies.
    9. To engage in lawful monitoring of job applicant activities and communications when they are on H4C premises, or utilizing H4C internet and WiFi connections, computers, networks, devices, software applications or systems.
    10. To engage in corporate transactions requiring review or disclosure of job applicant records subject to non-disclosure agreements, such as for evaluating potential mergers and acquisitions of H4C.
    11. To evaluate, assess, and manage H4C’s business relationship with vendors, service providers, and contractors that provide services to H4C related to recruiting or processing of data from or about job applicants.
    12. To improve job applicant experience on H4C computers, networks, devices, software applications or systems, and to debug, identify, and repair errors that impair existing intended functionality of our systems.
    13. To reduce the risk of spreading infectious diseases in or through the workplace.
  17. INDEPENDENT CONTRACTOR PURPOSES:
    1. To fulfill or meet the purpose for which you provided the information.
    2. To comply with state and federal laws and regulations requiring businesses to maintain certain records (accident or safety records, and tax records/1099 forms).
    3. To engage the services of independent contractors and compensate them for services.
    4. To evaluate, make, and communicate decisions regarding an independent contractor, including decisions to hire and/or terminate.
    5. To grant independent contractors access to secure H4C facilities, systems, networks, computers, and equipment, and maintain information on who accessed such facilities, systems, networks, computers, and equipment, and what they did therein or thereon.
    6. To implement, monitor, and manage electronic security measures on independent contractor devices used to access H4C networks and systems.
    7. To evaluate, assess, and manage H4C’s business relationship with vendors, service providers, and contractors that provide services to H4C.
    8. To improve user experience on H4C computers, networks, devices, software applications or systems, and to debug, identify, and repair errors that impair existing intended functionality of our systems.
    9. To reduce the risk of spreading infectious diseases in or through the workplace.

We may disclose your personal information for any one or more of the business purposes identified above.

Do We Sell or Share Any of Your Personal Information?

A common understanding of “selling” information involves a company taking information it has learned about you and exchanging that information with an unrelated third party for money, who will then use that data for a new purpose you did not intend. Hope For Cancer never does this with your information.

We use our users’ information to help people seek treatment at one of our centers. However, the CCPA has a much broader definition of “sell” than this, which encompasses activities beyond the traditional common understanding of “selling” for money, such as disclosing, disseminating, making available, transferring, or otherwise communicating by electronic or other means, a consumer’s personal information. Hope For Cancer strives to live up to the law and your wishes, as it relates to this right.

  • We don’t sell data to data brokers.
  • We don’t exchange information about you with a third party for money or any other valuable consideration.
  • We do not share your personal information for cross-context behavioral advertising.

We do not and will not use or disclose your sensitive personal information for purposes other than the following:

  1. To perform the services reasonably expected by an average consumer who requests those services.
  2. To detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information.
  3. To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions.
  4. To ensure the physical safety of natural persons.
  5. For short-term, transient use.
  6. To perform services on behalf of H4C.
  7. To verify or maintain the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by H4C, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by H4C.
  8. For purposes that do not involve inferring characteristics about the consumers, contractors, and applicants.
  1. California Privacy Rights

If you are a California resident, you have the following rights pursuant to the CCPA:

  • Right to Know. The right to request, up to 2 times in a 12-month period, that we identify to you (1) the categories of personal information we have collected about you going back to January 1, 2022, unless doing so would be impossible or involve disproportionate effort, or unless you request a specific time period, (2) the categories of sources from which the personal information was collected, (3) the business or commercial purpose for collecting, selling, or sharing this information, and (4) the categories of third parties with whom we share or have shared your personal information;
  • Right to Access. The right to request, up to 2 times in a 12-month period, that we disclose to you, free of charge, the specific pieces of personal information we have collected about you going back to January 1, 2022, unless doing so would be impossible or involve disproportionate effort, or unless you request a specific time period;
  • Right to Delete. The right to request, up to 2 times in a 12-month period, that we delete personal information that we collected from you, subject to certain exceptions;
  • Right to Correct. The right to request that we correct inaccurate personal information (to the extent such an inaccuracy exists) that we maintain about you; and
  • The right to designate an authorized agent to submit one of the above requests on your behalf. See below for how you can designate an authorized agent.
  1. How to Submit a Request
    You can submit any of the above types of consumer requests through any of the 3 options below:

    1. Email us at [email protected]; please include “Request under CCPA” in the subject line.
    2. Call our privacy toll-free line at +1-833-464-6469 and clearly state your name, contact information, and the nature of your inquiry.

    We recommend making your request by email to ensure we accurately capture your contact details and other information. Please include in your request:

    • Your full name and address
    • Former names (if applicable)
    • Former addresses (including dates of change) (if applicable)
    • Contact information (phone number or email address)
    • Your relationship to us (e.g., former or existing patient)
    • Type of request that you are making (e.g., Categories Report, Specific Pieces Report).
  1. Verification
    If you are a California resident, when you submit a Right to Know, Right to Access, Right to Delete, or Right to Correct request through one of the methods provided above, we will ask you to provide some information in order to verify your identity and respond to your request. Specifically, we will ask you to verify information that can be used to link your identity to particular records in our possession, which depends on the nature of your relationship and interaction with us.
  1. Responding to Your Right to Know, Right to Access, Right to Delete, and Right to Correct Requests
    Upon receiving a verifiable request from a California resident, we will confirm receipt of the request no later than 10 business days after receiving it. We endeavor to respond to a verifiable request within forty-five (45) calendar days of its receipt. If we require more time (up to an additional 45 calendar days, or 90 calendar days total from the date we receive your request), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable.We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.For a request to correct inaccurate personal information, we will accept, review, and consider any documentation that you provide, and we may require that you provide documentation to rebut our own documentation that the personal information is accurate. You should make a good-faith effort to provide us with all necessary information at the time that you make the request to correct. We may deny a request to correct if we have a good-faith, reasonable, and documented belief that a request to correct is fraudulent or abusive. If we deny your request to correct, we shall inform you of our decision not to comply and provide an explanation as to why we believe the request is fraudulent.
  1. Authorized Agents
    Authorized agents may exercise rights on behalf of California Consumers, but we reserve the right to verify the Consumer directly as described above. Authorized agents may email us at [email protected] to exercise rights on the Consumer’s behalf.  We will require the agent to demonstrate authority to act on behalf of the Consumer by providing, for example, evidence of the agent’s identity, and proof of registration with the California Secretary of State (if the agent is a business). At least one of the following evidencing proof of the agent’s legal authority to act on behalf of the individual Consumer:

    • Presenting a Power of Attorney granted under the Probate Code that we can reasonably verify, or
    • Signed permission by the Consumer.  We may also require the Consumer to verify their identity directly with us and confirm that they provided the authorized agent permission to submit the request.
  1. Other California Privacy Rights
    We do not share “personal information” subject to California Civil Code §1798.83 (the “Shine the Light law”) with third parties for the third parties’ direct marketing purposes absent your consent.  If you are a California resident, you may request information about our compliance with the Shine the Light law by emailing us at [email protected].  Any such request must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code.  Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this email address.

Retention of Personal Information

We will retain each category of personal information in accordance with our established data retention schedule as indicated above. In deciding how long to retain each category of personal information that we collect, we consider many criteria, including, but not limited to the business purposes for which the Personal Information was collected; relevant federal, state, and local recordkeeping laws; applicable statutes of limitations for claims to which the information may be relevant; and legal preservation of evidence obligations.

We apply our data retention procedures on an annual basis to determine if the business purposes for collecting the personal information, and legal reasons for retaining the personal information, have both expired. If so, we will purge the information in a secure manner.

Business Transfers

In the event we sell or transfer a particular portion of its business assets, information of consumers, contractors, and applicants may be one of the business assets transferred as part of the transaction. If substantially all of our assets are acquired, information of consumers, contractors, and applicants may be transferred as part of the acquisition.

Compliance with Law and Safety

Use of Cookies and Other Tracking Technology

A “cookie” is a piece of data stored on your hard drive containing non-personally identifiable information about you. We use cookies and similar applications for the purposes of enabling us to evaluate the use of our website and improve the experience of visitors to it. For information on the way in which we use cookies to monitor and manage our website performance, please see our Cookie Notice.

External Links

Our website may contain links to third-party websites whose information practices differ from ours and are governed by their privacy procedures, policies, and security measures. For instance, we may provide links to seminars, articles and events offered or hosted by third parties. If you choose to visit any linked websites, before submitting any information via those sites, you should understand the applicable privacy policies, data protection standards, and security procedures. We have no control over data submitted to or collected by these third parties. To help ensure the protection of your privacy, we recommend that you review the Privacy Policy of any site you visit via a link from our website.

Children Under the Age of 16

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Protection of Personal Information We Collect

We use industry-standard methods to safeguard and secure the information we collect online to prevent unauthorized access and maintain data accuracy, including: ensuring that automatically collected data and voluntarily collected data are kept separate at all times; use of internal encryption on all data stores that house voluntarily captured data; use commercially reasonable tools and techniques to protect against unauthorized access to our systems; restricting access to private information to those who need such access in the course of their duties for us.

How to Contact Us

For general questions about this Notice, you may contact us as follows:

  1. By mail: 2514 Jamacha Rd, Ste 502-153, El Cajon, CA 92019
  2. By email: [email protected]
  3. Submit an online request on our website by clicking here.
  4. Call our privacy toll-free line at +1-833-464-6469

Changes

From time to time we may modify and/or update this Privacy Policy, so we encourage you to check back on a regular basis to determine if any changes have been made.